./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4081343810 <...> audit: type=1400 audit(1713054125.343:64): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.161390][ T30] audit: type=1400 audit(1713054125.343:65): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.615808][ T228] sftp-server (228) used greatest stack depth: 22096 bytes left Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. execve("./syz-executor4081343810", ["./syz-executor4081343810"], 0x7ffd4043a840 /* 10 vars */) = 0 brk(NULL) = 0x555555f09000 brk(0x555555f09d00) = 0x555555f09d00 arch_prctl(ARCH_SET_FS, 0x555555f09380) = 0 set_tid_address(0x555555f09650) = 294 set_robust_list(0x555555f09660, 24) = 0 rseq(0x555555f09ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4081343810", 4096) = 28 getrandom("\x06\x4b\x25\xc4\x19\x15\x9e\xf8", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555f09d00 brk(0x555555f2ad00) = 0x555555f2ad00 brk(0x555555f2b000) = 0x555555f2b000 mprotect(0x7f04ba9c3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f09650) = 295 ./strace-static-x86_64: Process 295 attached [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] set_robust_list(0x555555f09660, 24) = 0 ./strace-static-x86_64: Process 296 attached [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] set_robust_list(0x555555f09660, 24) = 0 [pid 294] <... clone resumed>, child_tidptr=0x555555f09650) = 296 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 297 attached , child_tidptr=0x555555f09650) = 298 [pid 295] <... clone resumed>, child_tidptr=0x555555f09650) = 299 [pid 297] set_robust_list(0x555555f09660, 24./strace-static-x86_64: Process 298 attached [pid 294] <... clone resumed>, child_tidptr=0x555555f09650) = 297 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 299 attached [pid 297] <... set_robust_list resumed>) = 0 [pid 298] set_robust_list(0x555555f09660, 24 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... set_robust_list resumed>) = 0 [pid 299] set_robust_list(0x555555f09660, 24 [pid 298] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 294] <... clone resumed>, child_tidptr=0x555555f09650) = 301 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... clone resumed>, child_tidptr=0x555555f09650) = 300 [pid 298] <... prctl resumed>) = 0 [pid 299] <... set_robust_list resumed>) = 0 [pid 298] setpgid(0, 0 [pid 294] <... clone resumed>, child_tidptr=0x555555f09650) = 302 [pid 298] <... setpgid resumed>) = 0 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 300 attached [pid 300] set_robust_list(0x555555f09660, 24) = 0 [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 300] setpgid(0, 0) = 0 [pid 298] <... openat resumed>) = 3 [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... prctl resumed>) = 0 [pid 298] write(3, "1000", 4./strace-static-x86_64: Process 302 attached [pid 299] setpgid(0, 0) = 0 [pid 298] <... write resumed>) = 4 [pid 302] set_robust_list(0x555555f09660, 24 [pid 298] close(3 [pid 302] <... set_robust_list resumed>) = 0 [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 298] <... close resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 298] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=4, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... openat resumed>) = 3 [pid 300] write(3, "1000", 4) = 4 [pid 300] close(3./strace-static-x86_64: Process 303 attached ./strace-static-x86_64: Process 301 attached ) = 0 [pid 299] write(3, "1000", 4 [pid 298] <... bpf resumed>) = 3 [pid 302] <... clone resumed>, child_tidptr=0x555555f09650) = 303 [pid 300] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=4, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 299] <... write resumed>) = 4 [pid 298] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 299] close(3 [pid 298] <... bpf resumed>) = -1 EFAULT (Bad address) [ 23.447331][ T30] audit: type=1400 audit(1713054134.643:66): avc: denied { execmem } for pid=294 comm="syz-executor408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.476392][ T30] audit: type=1400 audit(1713054134.673:67): avc: denied { map_create } for pid=298 comm="syz-executor408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [pid 299] <... close resumed>) = 0 [pid 298] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 299] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=4, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 299] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 299] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 303] set_robust_list(0x555555f09660, 24) = 0 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 303] setpgid(0, 0) = 0 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 303] write(3, "1000", 4) = 4 [pid 303] close(3) = 0 [pid 303] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=4, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 301] set_robust_list(0x555555f09660, 24 [pid 303] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 301] <... set_robust_list resumed>) = 0 [pid 303] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f09650) = 304 [pid 300] <... bpf resumed>) = 3 [pid 300] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 304 attached ) = -1 EFAULT (Bad address) [pid 304] set_robust_list(0x555555f09660, 24) = 0 [ 23.496041][ T30] audit: type=1400 audit(1713054134.673:68): avc: denied { map_read map_write } for pid=298 comm="syz-executor408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 23.516912][ T30] audit: type=1400 audit(1713054134.703:69): avc: denied { prog_load } for pid=298 comm="syz-executor408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [pid 300] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] setpgid(0, 0) = 0 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 304] write(3, "1000", 4) = 4 [pid 304] close(3) = 0 [pid 304] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=4, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 304] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [ 23.536710][ T30] audit: type=1400 audit(1713054134.703:70): avc: denied { bpf } for pid=298 comm="syz-executor408" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 23.558087][ T30] audit: type=1400 audit(1713054134.703:71): avc: denied { perfmon } for pid=298 comm="syz-executor408" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [pid 304] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 299] <... bpf resumed>) = 4 [pid 299] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="workqueue_activate_work", prog_fd=4}}, 16 [pid 298] <... bpf resumed>) = 4 [pid 298] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="workqueue_activate_work", prog_fd=4}}, 16 [pid 304] <... bpf resumed>) = 4 [pid 300] <... bpf resumed>) = 4 [pid 304] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="workqueue_activate_work", prog_fd=4}}, 16 [pid 303] <... bpf resumed>) = 4 [pid 300] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="workqueue_activate_work", prog_fd=4}}, 16 [pid 304] <... bpf resumed>) = 5 [pid 303] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="workqueue_activate_work", prog_fd=4}}, 16 [pid 300] <... bpf resumed>) = 5 [pid 299] <... bpf resumed>) = 5 [pid 298] <... bpf resumed>) = 5 [pid 304] exit_group(0 [pid 303] <... bpf resumed>) = 5 [pid 300] exit_group(0 [pid 304] <... exit_group resumed>) = ? [pid 298] exit_group(0 [pid 299] exit_group(0 [pid 303] exit_group(0 [pid 299] <... exit_group resumed>) = ? [pid 304] +++ exited with 0 +++ [pid 300] <... exit_group resumed>) = ? [pid 299] +++ exited with 0 +++ [pid 303] <... exit_group resumed>) = ? [pid 298] <... exit_group resumed>) = ? [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 301] <... restart_syscall resumed>) = 0 [pid 295] <... restart_syscall resumed>) = 0 [pid 300] +++ exited with 0 +++ [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 305 attached ./strace-static-x86_64: Process 306 attached [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] set_robust_list(0x555555f09660, 24 [pid 305] set_robust_list(0x555555f09660, 24 [pid 301] <... clone resumed>, child_tidptr=0x555555f09650) = 305 [pid 295] <... clone resumed>, child_tidptr=0x555555f09650) = 306 [pid 305] <... set_robust_list resumed>) = 0 [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 297] <... restart_syscall resumed>) = 0 [pid 305] setpgid(0, 0) = 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "1000", 4) = 4 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] close(3) = 0 [pid 305] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=4, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 305] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 307 attached [pid 306] <... set_robust_list resumed>) = 0 [pid 305] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 297] <... clone resumed>, child_tidptr=0x555555f09650) = 307 [pid 307] set_robust_list(0x555555f09660, 24) = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 307] setpgid(0, 0 [pid 305] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 307] <... setpgid resumed>) = 0 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 307] write(3, "1000", 4) = 4 [pid 307] close(3) = 0 [pid 307] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=4, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 305] <... bpf resumed>) = 4 [pid 307] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="workqueue_activate_work", prog_fd=4}}, 16 [pid 307] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 307] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 306] <... prctl resumed>) = 0 [pid 307] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="workqueue_activate_work", prog_fd=4}}, 16 [pid 306] setpgid(0, 0) = 0 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 306] write(3, "1000", 4) = 4 [pid 306] close(3) = 0 [pid 306] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=4, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 306] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 306] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [ 23.687944][ T30] audit: type=1400 audit(1713054134.883:73): avc: denied { prog_run } for pid=298 comm="syz-executor408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 23.707396][ T30] audit: type=1400 audit(1713054134.883:72): avc: denied { prog_run } for pid=299 comm="syz-executor408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [pid 306] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="workqueue_activate_work", prog_fd=4}}, 16 [pid 296] kill(-298, SIGKILL) = 0 [pid 296] kill(298, SIGKILL) = 0 [pid 302] kill(-303, SIGKILL) = 0 [pid 302] kill(303, SIGKILL) = 0 [pid 296] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, 0x555555f0a6f0 /* 2 entries */, 32768) = 48 [pid 296] getdents64(3, 0x555555f0a6f0 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 302] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x555555f0a6f0 /* 2 entries */, 32768) = 48 [pid 302] getdents64(3, 0x555555f0a6f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 301] kill(-305, SIGKILL [pid 295] kill(-306, SIGKILL [pid 301] <... kill resumed>) = 0 [pid 295] <... kill resumed>) = 0 [pid 301] kill(305, SIGKILL [pid 295] kill(306, SIGKILL [pid 301] <... kill resumed>) = 0 [pid 295] <... kill resumed>) = 0 [pid 297] kill(-307, SIGKILL) = 0 [pid 297] kill(307, SIGKILL) = 0 [pid 301] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... openat resumed>) = 3 [pid 295] <... openat resumed>) = 3 [pid 301] newfstatat(3, "", [pid 295] newfstatat(3, "", [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, [pid 295] getdents64(3, [pid 301] <... getdents64 resumed>0x555555f0a6f0 /* 2 entries */, 32768) = 48 [pid 295] <... getdents64 resumed>0x555555f0a6f0 /* 2 entries */, 32768) = 48 [pid 301] getdents64(3, [pid 297] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] getdents64(3, [pid 301] <... getdents64 resumed>0x555555f0a6f0 /* 0 entries */, 32768) = 0 [pid 297] <... openat resumed>) = 3 [pid 295] <... getdents64 resumed>0x555555f0a6f0 /* 0 entries */, 32768) = 0 [pid 301] close(3 [pid 297] newfstatat(3, "", [pid 295] close(3 [pid 301] <... close resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... close resumed>) = 0 [pid 297] getdents64(3, 0x555555f0a6f0 /* 2 entries */, 32768) = 48 [pid 297] getdents64(3, 0x555555f0a6f0 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [ 123.970327][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 123.977468][ C1] rcu: 0-...0: (1 ticks this GP) idle=b97/1/0x4000000000000000 softirq=1819/1822 fqs=5000 last_accelerate: 93a6/bacc dyntick_enabled: 1 [ 123.991753][ C1] (detected by 1, t=10002 jiffies, g=385, q=2252) [ 123.998325][ C1] Sending NMI from CPU 1 to CPUs 0: [ 124.003556][ C0] NMI backtrace for cpu 0 [ 124.003571][ C0] CPU: 0 PID: 20 Comm: kworker/0:1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 124.003590][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 124.003602][ C0] Workqueue: rcu_gp process_srcu [ 124.003646][ C0] RIP: 0010:kvm_wait+0x117/0x180 [ 124.003667][ C0] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d 8a 03 f3 03 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 124.003680][ C0] RSP: 0018:ffffc90000007860 EFLAGS: 00000046 [ 124.003694][ C0] RAX: 0000000000000003 RBX: 1ffff92000000f10 RCX: ffffffff8154f88f [ 124.003706][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f70365c0 [ 124.003717][ C0] RBP: ffffc90000007910 R08: dffffc0000000000 R09: ffffed103ee06cb9 [ 124.003729][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 124.003740][ C0] R13: ffff8881f70365c0 R14: 0000000000000003 R15: 1ffff92000000f14 [ 124.003751][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 124.003765][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.003776][ C0] CR2: 0000000000000000 CR3: 000000011b8ba000 CR4: 00000000003506b0 [ 124.003790][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.003799][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.003809][ C0] Call Trace: [ 124.003815][ C0] [ 124.003824][ C0] ? show_regs+0x58/0x60 [ 124.003841][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 124.003861][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 124.003880][ C0] ? kvm_wait+0x117/0x180 [ 124.003894][ C0] ? kvm_wait+0x117/0x180 [ 124.003907][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 124.003926][ C0] ? nmi_handle+0xa8/0x280 [ 124.003941][ C0] ? kvm_wait+0x117/0x180 [ 124.003955][ C0] ? default_do_nmi+0x69/0x160 [ 124.003973][ C0] ? exc_nmi+0xaf/0x120 [ 124.003987][ C0] ? end_repeat_nmi+0x16/0x31 [ 124.004003][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 124.004025][ C0] ? kvm_wait+0x117/0x180 [ 124.004039][ C0] ? kvm_wait+0x117/0x180 [ 124.004053][ C0] ? kvm_wait+0x117/0x180 [ 124.004067][ C0] [ 124.004072][ C0] [ 124.004086][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 124.004102][ C0] ? pv_hash+0x86/0x150 [ 124.004117][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 124.004136][ C0] ? sock_map_delete_elem+0xcb/0x130 [ 124.004156][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 124.004176][ C0] _raw_spin_lock+0x139/0x1b0 [ 124.004193][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 124.004212][ C0] __queue_work+0x58c/0xcd0 [ 124.004231][ C0] queue_work_on+0x105/0x170 [ 124.004248][ C0] ? wq_worker_last_func+0x50/0x50 [ 124.004263][ C0] ? free_uid+0x16c/0x2f0 [ 124.004279][ C0] ? file_free_rcu+0x9f/0xb0 [ 124.004297][ C0] bpf_prog_free+0x13c/0x150 [ 124.004316][ C0] __bpf_prog_put_rcu+0xaf/0xc0 [ 124.004331][ C0] ? __bpf_prog_put_noref+0x2c0/0x2c0 [ 124.004346][ C0] rcu_do_batch+0x57a/0xc10 [ 124.004384][ C0] ? local_bh_enable+0x20/0x20 [ 124.004403][ C0] rcu_core+0x517/0x1020 [ 124.004421][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 124.004438][ C0] ? sched_clock_cpu+0x18/0x3b0 [ 124.004456][ C0] ? irqtime_account_irq+0x79/0x3c0 [ 124.004473][ C0] rcu_core_si+0x9/0x10 [ 124.004487][ C0] __do_softirq+0x26d/0x5bf [ 124.004503][ C0] do_softirq+0xf6/0x150 [ 124.004519][ C0] [ 124.004523][ C0] [ 124.004528][ C0] ? __local_bh_enable_ip+0x80/0x80 [ 124.004543][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 124.004559][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 124.004576][ C0] __local_bh_enable_ip+0x75/0x80 [ 124.004593][ C0] _raw_spin_unlock_bh+0x51/0x60 [ 124.004609][ C0] sock_map_delete_elem+0xcb/0x130 [ 124.004625][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0xe90 [ 124.004638][ C0] bpf_trace_run1+0xbf/0x1c0 [ 124.004655][ C0] ? update_load_avg+0x43a/0x1150 [ 124.004671][ C0] ? bpf_put_raw_tracepoint+0x60/0x60 [ 124.004687][ C0] ? __kasan_check_write+0x14/0x20 [ 124.004703][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 124.004719][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 124.004735][ C0] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 124.004753][ C0] ? __bpf_trace_workqueue_queue_work+0x40/0x40 [ 124.004770][ C0] __bpf_trace_workqueue_activate_work+0x1d/0x30 [ 124.004788][ C0] __traceiter_workqueue_activate_work+0x68/0xb0 [ 124.004806][ C0] __queue_work+0xc18/0xcd0 [ 124.004823][ C0] queue_work_on+0x105/0x170 [ 124.004839][ C0] ? __kasan_check_write+0x14/0x20 [ 124.004854][ C0] ? wq_worker_last_func+0x50/0x50 [ 124.004870][ C0] ? try_check_zero+0x230/0x370 [ 124.004885][ C0] ? ktime_get_mono_fast_ns+0x1bf/0x1e0 [ 124.004901][ C0] process_srcu+0x8ba/0xc50 [ 124.004920][ C0] process_one_work+0x6bb/0xc10 [ 124.004936][ C0] worker_thread+0xad5/0x12a0 [ 124.004950][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 124.004970][ C0] kthread+0x421/0x510 [ 124.004984][ C0] ? worker_clr_flags+0x180/0x180 [ 124.004998][ C0] ? kthread_blkcg+0xd0/0xd0 [ 124.005013][ C0] ret_from_fork+0x1f/0x30 [ 124.005032][ C0] [ 124.005038][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.482 msecs [ 244.810358][ T31] INFO: task syz-executor408:298 blocked for more than 122 seconds. [ 244.818281][ T31] Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 244.825945][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.834695][ T31] task:syz-executor408 state:D stack:25264 pid: 298 ppid: 296 flags:0x00004002 [ 244.843845][ T31] Call Trace: [ 244.847227][ T31] [ 244.850015][ T31] __schedule+0xccc/0x1590 [ 244.854552][ T31] ? __sched_text_start+0x8/0x8 [ 244.859215][ T31] ? __kasan_check_write+0x14/0x20 [ 244.864630][ T31] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 244.869909][ T31] schedule+0x11f/0x1e0 [ 244.874158][ T31] schedule_timeout+0xa9/0x370 [ 244.879168][ T31] ? console_conditional_schedule+0x30/0x30 [ 244.885116][ T31] ? __prepare_to_swait+0xac/0x130 [ 244.890108][ T31] wait_for_common+0x285/0x420 [ 244.894883][ T31] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 244.900833][ T31] ? wait_for_completion+0x20/0x20 [ 244.905745][ T31] ? __kasan_check_write+0x14/0x20 [ 244.910859][ T31] wait_for_completion+0x18/0x20 [ 244.915609][ T31] __synchronize_srcu+0x1a4/0x240 [ 244.920638][ T31] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 244.925907][ T31] ? synchronize_srcu_expedited+0x20/0x20 [ 244.931616][ T31] ? rcu_test_sync_prims+0x10/0x10 [ 244.936530][ T31] ? ktime_get_mono_fast_ns+0x1bf/0x1e0 [ 244.942100][ T31] synchronize_srcu+0x1d5/0x1f0 [ 244.946751][ T31] tracepoint_probe_unregister+0x73e/0x900 [ 244.952782][ T31] ? __bpf_trace_workqueue_queue_work+0x40/0x40 [ 244.958856][ T31] bpf_probe_unregister+0x61/0x70 [ 244.963891][ T31] bpf_raw_tp_link_release+0x63/0x90 [ 244.969006][ T31] bpf_link_free+0x129/0x3f0 [ 244.973587][ T31] ? bpf_link_put_deferred+0x20/0x20 [ 244.978674][ T31] ? debug_smp_processor_id+0x17/0x20 [ 244.984058][ T31] ? kasan_quarantine_put+0x34/0x1a0 [ 244.989151][ T31] bpf_link_release+0x170/0x180 [ 244.994185][ T31] ? bpf_prog_get_stats+0x2f0/0x2f0 [ 244.999183][ T31] __fput+0x3fe/0x910 [ 245.003583][ T31] ____fput+0x15/0x20 [ 245.007376][ T31] task_work_run+0x129/0x190 [ 245.011971][ T31] do_exit+0xc48/0x2ca0 [ 245.015956][ T31] ? put_task_struct+0x80/0x80 [ 245.023719][ T31] ? ptrace_notify+0x24c/0x350 [ 245.028424][ T31] ? do_notify_parent+0xa30/0xa30 [ 245.033650][ T31] do_group_exit+0x141/0x310 [ 245.038051][ T31] __x64_sys_exit_group+0x3f/0x40 [ 245.043122][ T31] do_syscall_64+0x3d/0xb0 [ 245.047342][ T31] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 245.053463][ T31] RIP: 0033:0x7f04ba94e0b9 [ 245.057766][ T31] RSP: 002b:00007ffcbac30548 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 245.066225][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f04ba94e0b9 [ 245.074136][ T31] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 245.082144][ T31] RBP: 00007f04ba9c92b0 R08: ffffffffffffffb8 R09: 00000000000000a0 [ 245.089917][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04ba9c92b0 [ 245.097948][ T31] R13: 0000000000000000 R14: 00007f04ba9c9d20 R15: 00007f04ba91f260 [ 245.105870][ T31] [ 245.108593][ T31] INFO: task syz-executor408:303 blocked for more than 123 seconds. [ 245.116871][ T31] Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 245.124268][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.132951][ T31] task:syz-executor408 state:D stack:22864 pid: 303 ppid: 302 flags:0x00004002 [ 245.142241][ T31] Call Trace: [ 245.145331][ T31] [ 245.148099][ T31] __schedule+0xccc/0x1590 [ 245.152544][ T31] ? __sched_text_start+0x8/0x8 [ 245.157201][ T31] ? __mutex_add_waiter+0x1b5/0x310 [ 245.162405][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 245.168097][ T31] schedule+0x11f/0x1e0 [ 245.172308][ T31] schedule_preempt_disabled+0x13/0x20 [ 245.177826][ T31] __mutex_lock+0x90e/0x1870 [ 245.182417][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 245.188995][ T31] ? __kasan_check_read+0x11/0x20 [ 245.194081][ T31] ? call_rcu+0xcfd/0x12a0 [ 245.198393][ T31] ? rcu_gp_kthread_wake+0x90/0x90 [ 245.203546][ T31] ? __stack_depot_save+0x34/0x470 [ 245.208536][ T31] ? kasan_set_free_info+0x23/0x40 [ 245.213783][ T31] ? kmem_cache_free+0x116/0x2e0 [ 245.218547][ T31] __mutex_lock_slowpath+0xe/0x10 [ 245.223826][ T31] mutex_lock+0x135/0x1e0 [ 245.227962][ T31] ? kasan_set_track+0x4b/0x70 [ 245.232821][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 245.239220][ T31] ? delete_node+0x736/0x790 [ 245.243823][ T31] ? __x64_sys_exit_group+0x3f/0x40 [ 245.249136][ T31] ? do_syscall_64+0x3d/0xb0 [ 245.253825][ T31] tracepoint_probe_unregister+0x37/0x900 [ 245.259533][ T31] ? __bpf_trace_workqueue_queue_work+0x40/0x40 [ 245.266670][ T31] bpf_probe_unregister+0x61/0x70 [ 245.271882][ T31] bpf_raw_tp_link_release+0x63/0x90 [ 245.276988][ T31] bpf_link_free+0x129/0x3f0 [ 245.281763][ T31] ? bpf_link_put_deferred+0x20/0x20 [ 245.286866][ T31] ? debug_smp_processor_id+0x17/0x20 [ 245.292340][ T31] ? kasan_quarantine_put+0x34/0x1a0 [ 245.297439][ T31] bpf_link_release+0x170/0x180 [ 245.302275][ T31] ? bpf_prog_get_stats+0x2f0/0x2f0 [ 245.307550][ T31] __fput+0x3fe/0x910 [ 245.311652][ T31] ____fput+0x15/0x20 [ 245.315449][ T31] task_work_run+0x129/0x190 [ 245.319869][ T31] do_exit+0xc48/0x2ca0 [ 245.324107][ T31] ? put_task_struct+0x80/0x80 [ 245.328929][ T31] ? ptrace_notify+0x24c/0x350 [ 245.333850][ T31] ? do_notify_parent+0xa30/0xa30 [ 245.338830][ T31] do_group_exit+0x141/0x310 [ 245.344046][ T31] __x64_sys_exit_group+0x3f/0x40 [ 245.348888][ T31] do_syscall_64+0x3d/0xb0 [ 245.353342][ T31] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 245.359189][ T31] RIP: 0033:0x7f04ba94e0b9 [ 245.363711][ T31] RSP: 002b:00007ffcbac30548 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 245.372233][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f04ba94e0b9 [ 245.380625][ T31] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 245.388403][ T31] RBP: 00007f04ba9c92b0 R08: ffffffffffffffb8 R09: 00000000000000a0 [ 245.396453][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04ba9c92b0 [ 245.404980][ T31] R13: 0000000000000000 R14: 00007f04ba9c9d20 R15: 00007f04ba91f260 [ 245.413095][ T31] [ 245.416015][ T31] INFO: task syz-executor408:305 blocked for more than 123 seconds. [ 245.424434][ T31] Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 245.432172][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.441102][ T31] task:syz-executor408 state:D stack:26400 pid: 305 ppid: 301 flags:0x00004004 [ 245.451109][ T31] Call Trace: [ 245.454191][ T31] [ 245.456977][ T31] __schedule+0xccc/0x1590 [ 245.461471][ T31] ? __sched_text_start+0x8/0x8 [ 245.466121][ T31] ? __mutex_add_waiter+0xe4/0x310 [ 245.471228][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 245.476833][ T31] schedule+0x11f/0x1e0 [ 245.481003][ T31] schedule_preempt_disabled+0x13/0x20 [ 245.486260][ T31] __mutex_lock+0x90e/0x1870 [ 245.490947][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 245.497531][ T31] ? slab_post_alloc_hook+0x72/0x2c0 [ 245.502926][ T31] ? security_file_alloc+0x29/0x120 [ 245.508034][ T31] ? security_file_alloc+0x29/0x120 [ 245.513364][ T31] ? kmem_cache_alloc+0xf5/0x200 [ 245.518125][ T31] ? percpu_counter_add_batch+0x13d/0x160 [ 245.523953][ T31] ? alloc_file+0x83/0x4e0 [ 245.528179][ T31] __mutex_lock_slowpath+0xe/0x10 [ 245.533192][ T31] mutex_lock+0x135/0x1e0 [ 245.537329][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 245.544018][ T31] ? alloc_file_pseudo+0x280/0x2f0 [ 245.548935][ T31] ? __bpf_trace_workqueue_queue_work+0x40/0x40 [ 245.555285][ T31] tracepoint_probe_register_prio_may_exist+0xb5/0x180 [ 245.562279][ T31] ? acct_clear_integrals+0x30/0x30 [ 245.567282][ T31] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 245.572375][ T31] bpf_probe_register+0x152/0x1e0 [ 245.577228][ T31] bpf_raw_tracepoint_open+0x610/0x950 [ 245.583116][ T31] ? bpf_obj_get_info_by_fd+0x3ce0/0x3ce0 [ 245.588642][ T31] ? __kasan_check_write+0x14/0x20 [ 245.593944][ T31] ? __kasan_check_write+0x14/0x20 [ 245.599311][ T31] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 245.604462][ T31] ? selinux_bpf+0xd2/0x100 [ 245.609215][ T31] ? security_bpf+0x82/0xb0 [ 245.613808][ T31] __sys_bpf+0x489/0x760 [ 245.617944][ T31] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 245.623544][ T31] ? ptrace_notify+0x24c/0x350 [ 245.628122][ T31] ? __kasan_check_read+0x11/0x20 [ 245.633127][ T31] __x64_sys_bpf+0x7c/0x90 [ 245.638052][ T31] do_syscall_64+0x3d/0xb0 [ 245.642449][ T31] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 245.648768][ T31] RIP: 0033:0x7f04ba94ff69 [ 245.653330][ T31] RSP: 002b:00007ffcbac305a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.661927][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f04ba94ff69 [ 245.669709][ T31] RDX: 0000000000000010 RSI: 0000000020000300 RDI: 0000000000000011 [ 245.677799][ T31] RBP: 0000000000000000 R08: 00000000000000a0 R09: 00000000000000a0 [ 245.686335][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.694475][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.703209][ T31] [ 245.706080][ T31] INFO: task syz-executor408:306 blocked for more than 123 seconds. [ 245.714376][ T31] Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 245.721859][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.730617][ T31] task:syz-executor408 state:D stack:26512 pid: 306 ppid: 295 flags:0x00004004 [ 245.739637][ T31] Call Trace: [ 245.743142][ T31] [ 245.746004][ T31] __schedule+0xccc/0x1590 [ 245.750709][ T31] ? __sched_text_start+0x8/0x8 [ 245.755385][ T31] ? __mutex_add_waiter+0xe4/0x310 [ 245.760618][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 245.766168][ T31] schedule+0x11f/0x1e0 [ 245.770135][ T31] schedule_preempt_disabled+0x13/0x20 [ 245.775789][ T31] __mutex_lock+0x90e/0x1870 [ 245.780436][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 245.787013][ T31] ? slab_post_alloc_hook+0x72/0x2c0 [ 245.792378][ T31] ? security_file_alloc+0x29/0x120 [ 245.797377][ T31] ? security_file_alloc+0x29/0x120 [ 245.802664][ T31] ? kmem_cache_alloc+0xf5/0x200 [ 245.807650][ T31] ? percpu_counter_add_batch+0x13d/0x160 [ 245.813447][ T31] ? alloc_file+0x83/0x4e0 [ 245.817676][ T31] __mutex_lock_slowpath+0xe/0x10 [ 245.822973][ T31] mutex_lock+0x135/0x1e0 [ 245.827278][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 245.833921][ T31] ? alloc_file_pseudo+0x280/0x2f0 [ 245.838835][ T31] ? __bpf_trace_workqueue_queue_work+0x40/0x40 [ 245.845092][ T31] tracepoint_probe_register_prio_may_exist+0xb5/0x180 [ 245.851959][ T31] ? acct_clear_integrals+0x30/0x30 [ 245.856863][ T31] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 245.862061][ T31] bpf_probe_register+0x152/0x1e0 [ 245.867068][ T31] bpf_raw_tracepoint_open+0x610/0x950 [ 245.872699][ T31] ? bpf_obj_get_info_by_fd+0x3ce0/0x3ce0 [ 245.878348][ T31] ? __kasan_check_write+0x14/0x20 [ 245.883625][ T31] ? __kasan_check_write+0x14/0x20 [ 245.888700][ T31] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 245.894004][ T31] ? selinux_bpf+0xd2/0x100 [ 245.898315][ T31] ? security_bpf+0x82/0xb0 [ 245.903000][ T31] __sys_bpf+0x489/0x760 [ 245.907044][ T31] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 245.912415][ T31] ? ptrace_notify+0x24c/0x350 [ 245.916980][ T31] ? __kasan_check_read+0x11/0x20 [ 245.922024][ T31] __x64_sys_bpf+0x7c/0x90 [ 245.926326][ T31] do_syscall_64+0x3d/0xb0 [ 245.930842][ T31] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 245.936536][ T31] RIP: 0033:0x7f04ba94ff69 [ 245.941171][ T31] RSP: 002b:00007ffcbac305a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.949423][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f04ba94ff69 [ 245.957465][ T31] RDX: 0000000000000010 RSI: 0000000020000300 RDI: 0000000000000011 [ 245.965505][ T31] RBP: 0000000000000000 R08: 00000000000000a0 R09: 00000000000000a0 [ 245.973407][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.981346][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.989281][ T31] [ 245.992329][ T31] INFO: task syz-executor408:307 blocked for more than 124 seconds. [ 246.000119][ T31] Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 246.007573][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.016258][ T31] task:syz-executor408 state:D stack:26512 pid: 307 ppid: 297 flags:0x00004004 [ 246.026074][ T31] Call Trace: [ 246.029159][ T31] [ 246.032115][ T31] __schedule+0xccc/0x1590 [ 246.036346][ T31] ? __sched_text_start+0x8/0x8 [ 246.041319][ T31] ? __mutex_add_waiter+0xe4/0x310 [ 246.046235][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 246.051936][ T31] schedule+0x11f/0x1e0 [ 246.055905][ T31] schedule_preempt_disabled+0x13/0x20 [ 246.061513][ T31] __mutex_lock+0x90e/0x1870 [ 246.065927][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 246.073215][ T31] ? slab_post_alloc_hook+0x72/0x2c0 [ 246.078312][ T31] ? security_file_alloc+0x29/0x120 [ 246.083881][ T31] ? security_file_alloc+0x29/0x120 [ 246.089025][ T31] ? kmem_cache_alloc+0xf5/0x200 [ 246.094194][ T31] ? percpu_counter_add_batch+0x13d/0x160 [ 246.099832][ T31] ? alloc_file+0x83/0x4e0 [ 246.104645][ T31] __mutex_lock_slowpath+0xe/0x10 [ 246.109701][ T31] mutex_lock+0x135/0x1e0 [ 246.114120][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 246.120671][ T31] ? alloc_file_pseudo+0x280/0x2f0 [ 246.125588][ T31] ? __bpf_trace_workqueue_queue_work+0x40/0x40 [ 246.131843][ T31] tracepoint_probe_register_prio_may_exist+0xb5/0x180 [ 246.138677][ T31] ? acct_clear_integrals+0x30/0x30 [ 246.144070][ T31] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 246.148907][ T31] bpf_probe_register+0x152/0x1e0 [ 246.153947][ T31] bpf_raw_tracepoint_open+0x610/0x950 [ 246.159207][ T31] ? bpf_obj_get_info_by_fd+0x3ce0/0x3ce0 [ 246.164941][ T31] ? __kasan_check_write+0x14/0x20 [ 246.169870][ T31] ? __kasan_check_write+0x14/0x20 [ 246.175249][ T31] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 246.180335][ T31] ? selinux_bpf+0xd2/0x100 [ 246.184667][ T31] ? security_bpf+0x82/0xb0 [ 246.189016][ T31] __sys_bpf+0x489/0x760 [ 246.193437][ T31] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 246.198707][ T31] ? ptrace_notify+0x24c/0x350 [ 246.203574][ T31] ? __kasan_check_read+0x11/0x20 [ 246.208408][ T31] __x64_sys_bpf+0x7c/0x90 [ 246.213006][ T31] do_syscall_64+0x3d/0xb0 [ 246.217235][ T31] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 246.223219][ T31] RIP: 0033:0x7f04ba94ff69 [ 246.227436][ T31] RSP: 002b:00007ffcbac305a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.236067][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f04ba94ff69 [ 246.244246][ T31] RDX: 0000000000000010 RSI: 0000000020000300 RDI: 0000000000000011 [ 246.252248][ T31] RBP: 0000000000000000 R08: 00000000000000a0 R09: 00000000000000a0 [ 246.260529][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.268480][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.276548][ T31] [ 246.279378][ T31] NMI backtrace for cpu 1 [ 246.283537][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 246.293095][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 246.302976][ T31] Call Trace: [ 246.306213][ T31] [ 246.308984][ T31] dump_stack_lvl+0x151/0x1b7 [ 246.313813][ T31] ? io_uring_drop_tctx_refs+0x190/0x190 [ 246.319244][ T31] dump_stack+0x15/0x17 [ 246.323327][ T31] nmi_cpu_backtrace+0x2f7/0x300 [ 246.328097][ T31] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 246.334097][ T31] ? sched_show_task+0x3d8/0x620 [ 246.338860][ T31] ? __rcu_read_unlock+0xd0/0xd0 [ 246.343634][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 246.349550][ T31] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 246.355447][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 246.361344][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 246.367193][ T31] watchdog+0xdd7/0xf50 [ 246.371294][ T31] ? __kasan_check_write+0x14/0x20 [ 246.376233][ T31] ? hungtask_pm_notify+0x50/0x50 [ 246.381086][ T31] ? __kasan_check_read+0x11/0x20 [ 246.386004][ T31] ? __kthread_parkme+0xb2/0x200 [ 246.390959][ T31] kthread+0x421/0x510 [ 246.394858][ T31] ? hungtask_pm_notify+0x50/0x50 [ 246.399723][ T31] ? kthread_blkcg+0xd0/0xd0 [ 246.404168][ T31] ret_from_fork+0x1f/0x30 [ 246.408407][ T31] [ 246.411349][ T31] Sending NMI from CPU 1 to CPUs 0: [ 246.416464][ C0] NMI backtrace for cpu 0 [ 246.416477][ C0] CPU: 0 PID: 20 Comm: kworker/0:1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 246.416496][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 246.416507][ C0] Workqueue: rcu_gp process_srcu [ 246.416533][ C0] RIP: 0010:kvm_wait+0x117/0x180 [ 246.416584][ C0] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d 8a 03 f3 03 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 246.416598][ C0] RSP: 0018:ffffc90000007860 EFLAGS: 00000046 [ 246.416611][ C0] RAX: 0000000000000003 RBX: 1ffff92000000f10 RCX: ffffffff8154f88f [ 246.416623][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f70365c0 [ 246.416635][ C0] RBP: ffffc90000007910 R08: dffffc0000000000 R09: ffffed103ee06cb9 [ 246.416647][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 246.416658][ C0] R13: ffff8881f70365c0 R14: 0000000000000003 R15: 1ffff92000000f14 [ 246.416670][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 246.416684][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.416695][ C0] CR2: 0000000000000000 CR3: 000000011b8ba000 CR4: 00000000003506b0 [ 246.416710][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.416719][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 246.416729][ C0] Call Trace: [ 246.416735][ C0] [ 246.416743][ C0] ? show_regs+0x58/0x60 [ 246.416816][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 246.416835][ C0] ? ___ratelimit+0x3c0/0x5a0 [ 246.416853][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 246.416872][ C0] ? kvm_wait+0x117/0x180 [ 246.416886][ C0] ? kvm_wait+0x117/0x180 [ 246.416901][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 246.416918][ C0] ? nmi_handle+0xa8/0x280 [ 246.416935][ C0] ? kvm_wait+0x117/0x180 [ 246.416948][ C0] ? kvm_wait+0x117/0x180 [ 246.416962][ C0] ? default_do_nmi+0x69/0x160 [ 246.416980][ C0] ? exc_nmi+0xaf/0x120 [ 246.416994][ C0] ? end_repeat_nmi+0x16/0x31 [ 246.417039][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 246.417060][ C0] ? kvm_wait+0x117/0x180 [ 246.417086][ C0] ? kvm_wait+0x117/0x180 [ 246.417101][ C0] ? kvm_wait+0x117/0x180 [ 246.417115][ C0] [ 246.417119][ C0] [ 246.417125][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 246.417141][ C0] ? pv_hash+0x86/0x150 [ 246.417157][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 246.417175][ C0] ? sock_map_delete_elem+0xcb/0x130 [ 246.417235][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 246.417255][ C0] _raw_spin_lock+0x139/0x1b0 [ 246.417272][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 246.417291][ C0] __queue_work+0x58c/0xcd0 [ 246.417311][ C0] queue_work_on+0x105/0x170 [ 246.417328][ C0] ? wq_worker_last_func+0x50/0x50 [ 246.417344][ C0] ? free_uid+0x16c/0x2f0 [ 246.417359][ C0] ? file_free_rcu+0x9f/0xb0 [ 246.417377][ C0] bpf_prog_free+0x13c/0x150 [ 246.417394][ C0] __bpf_prog_put_rcu+0xaf/0xc0 [ 246.417409][ C0] ? __bpf_prog_put_noref+0x2c0/0x2c0 [ 246.417425][ C0] rcu_do_batch+0x57a/0xc10 [ 246.417468][ C0] ? local_bh_enable+0x20/0x20 [ 246.417488][ C0] rcu_core+0x517/0x1020 [ 246.417506][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 246.417523][ C0] ? sched_clock_cpu+0x18/0x3b0 [ 246.417540][ C0] ? irqtime_account_irq+0x79/0x3c0 [ 246.417557][ C0] rcu_core_si+0x9/0x10 [ 246.417572][ C0] __do_softirq+0x26d/0x5bf [ 246.417588][ C0] do_softirq+0xf6/0x150 [ 246.417606][ C0] [ 246.417610][ C0] [ 246.417615][ C0] ? __local_bh_enable_ip+0x80/0x80 [ 246.417632][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 246.417648][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 246.417666][ C0] __local_bh_enable_ip+0x75/0x80 [ 246.417682][ C0] _raw_spin_unlock_bh+0x51/0x60 [ 246.417698][ C0] sock_map_delete_elem+0xcb/0x130 [ 246.417715][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0xe90 [ 246.417728][ C0] bpf_trace_run1+0xbf/0x1c0 [ 246.417746][ C0] ? update_load_avg+0x43a/0x1150 [ 246.417763][ C0] ? bpf_put_raw_tracepoint+0x60/0x60 [ 246.417780][ C0] ? __kasan_check_write+0x14/0x20 [ 246.417796][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 246.417812][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 246.417829][ C0] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 246.417848][ C0] ? __bpf_trace_workqueue_queue_work+0x40/0x40 [ 246.417865][ C0] __bpf_trace_workqueue_activate_work+0x1d/0x30 [ 246.417884][ C0] __traceiter_workqueue_activate_work+0x68/0xb0 [ 246.417902][ C0] __queue_work+0xc18/0xcd0 [ 246.417920][ C0] queue_work_on+0x105/0x170 [ 246.417936][ C0] ? __kasan_check_write+0x14/0x20 [ 246.417952][ C0] ? wq_worker_last_func+0x50/0x50 [ 246.417968][ C0] ? try_check_zero+0x230/0x370 [ 246.417984][ C0] ? ktime_get_mono_fast_ns+0x1bf/0x1e0 [ 246.418001][ C0] process_srcu+0x8ba/0xc50 [ 246.418020][ C0] process_one_work+0x6bb/0xc10 [ 246.418037][ C0] worker_thread+0xad5/0x12a0 [ 246.418052][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 246.418072][ C0] kthread+0x421/0x510 [ 246.418093][ C0] ? worker_clr_flags+0x180/0x180 [ 246.418107][ C0] ? kthread_blkcg+0xd0/0xd0 [ 246.418123][ C0] ret_from_fork+0x1f/0x30 [ 246.418142][ C0] [ 246.418149][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.686 msecs [ 320.019676][ T30] audit: type=1400 audit(1713054431.213:74): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.041953][ T30] audit: type=1400 audit(1713054431.213:75): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1